Centreon Infra Monitoring Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in Centreon Infra Monitoring versions 24.10.0 prior to 24.10.5, 24.04.0 prior to 24.04.5, and 23.10.0 prior to 23.10.4. This vulnerability allows users with elevated privileges to inject malicious scripts that are then executed when the affected page is viewed.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the page.

Remediation

Users can upgrade to Centreon Infra Monitoring versions 24.10.5, 24.04.5, or 23.10.4 to address this vulnerability.